dddmmm/hestiacp repository overview

⁠HestiaCP in Docker

Warning: The project is still in development and may have issues. Use at your own risk.

• Github⁠
• Docker Hub⁠
• Hestia Project⁠

Current image: HestiaCP 1.10.5 on Debian 12 (bookworm), tag dddmmm/hestiacp:1.10.5.2.

⁠Security

PHP2Shell (CVE-2026-109618, CVE-2026-109619) is fixed in 1.10.5.2.

• PHP 8.2–8.5 are the fixed releases: 8.2.35, 8.3.36, 8.4.27, 8.5.12.
• PHP 5.6–8.1 come from the sury repository with the fixes backported.
• The control panel runs on its own PHP 8.5.12. Hestia 1.10.5.2

⁠How to use this image

wget https://raw.githubusercontent.com/dddmmm5/hestiacp-docker/main/docker-compose.yml
wget https://raw.githubusercontent.com/dddmmm5/hestiacp-docker/main/.env.local -O .env
docker compose up -d

A random password will be generated for the admin user and will be displayed in the container logs on first run:

docker logs hestiacp

Note: MariaDB runs in a separate container (mariadb:10.11) to optimize initialization time for the main container. The MariaDB client in the image is pinned to 10.11 to match it: MariaDB 11.4+ clients require TLS, which the 10.11 server does not provide.

⁠Set password

docker exec hestiacp /usr/local/hestia/bin/v-change-user-password admin YOURNEWPASSWORD

⁠Upgrading from 1.8.11

Existing containers are migrated automatically when they are recreated with the new image:

docker compose pull
docker compose up -d

On the first start the container:

• runs the official Hestia upgrade steps from your version to 1.10.5;
• fixes user/group IDs that changed with Debian 12;
• moves the panel to the new hestiaweb user;
• keeps sites on their current PHP version;
• updates the Roundcube database schema.

Backups and the upgrade log are saved in /root/hst_backups/.

Back up /conf, /home, /backup and the MariaDB data before upgrading. The first start after the upgrade takes a few minutes.

⁠Multi PHP versions

PHP 5.6 = 5.6.40
PHP 7.0 = 7.0.33
PHP 7.1 = 7.1.33
PHP 7.2 = 7.2.34
PHP 7.3 = 7.3.33
PHP 7.4 = 7.4.33
PHP 8.0 = 8.0.30
PHP 8.1 = 8.1.34
PHP 8.2 = 8.2.35
PHP 8.3 = 8.3.36
PHP 8.4 = 8.4.27
PHP 8.5 = 8.5.12   (default)
Panel   = 8.5.12

⁠Install parameters

--apache yes
--phpfpm yes
--multiphp yes
--vsftpd yes
--proftpd no
--named yes
--mysql yes
--postgresql yes
--exim yes
--dovecot yes
--sieve yes
--clamav yes
--spamassassin yes
--iptables yes
--fail2ban yes
--quota yes
--api yes
--interactive no
--port 8083
--hostname server.hestiacp.localhost
--email [email protected]
--username admin
--password
--lang en
--with-debs /tmp/hestiacp-src/deb/
--force